Skip to main content

Privacy Policy

Last updated: March 22, 2026

The Short Version

We do not store your prompts, messages, or AI responses. We only track minimal usage metadata , token counts, timestamps, model names , to enforce limits and power your usage dashboard. Your conversation content exists only in memory during transit and is never written to disk. We use standard analytics tools on our website to improve the product.

1. Overview

Opulon API (“the Service”, “we”, “us”, “our”) is an AI API provider and gateway that provides managed access to AI language models. This Privacy Policy explains what data we collect, what we do not collect and how we handle information that passes through our Service.

This policy covers two distinct areas:

  • The API , requests and responses routed through our gateway
  • The Website , opulonapi.com and its pages

2. What We Do NOT Collect (API)

We are explicit about what we do not store or log from API requests:

  • Prompt content

    The text of your messages and system prompts is never stored. Discarded immediately after forwarding.

  • AI responses

    Model outputs are streamed through to you and not retained.

  • Images and files

    Any images or documents included in requests are forwarded and not stored.

  • Conversation history

    We do not maintain any record of your conversations or message threads.

  • Personal information from API users

    No names, emails, IP addresses, or personally identifiable information is collected from API requests.

3. What We DO Collect

From API requests (operational metadata only):

  • Token counts , input and output totals per request
  • Timestamps , when each request was made
  • Model name , which model was requested
  • HTTP status code , success or failure
  • Response latency , response time in milliseconds
  • API key identifier , prefix only, for per-key tracking

This metadata is strictly operational and cannot be used to reconstruct your conversations.

From the website (opulonapi.com):

  • Page views and navigation patterns
  • Button and link click interactions
  • Scroll depth and time on page
  • Browser type and device category (aggregated, not personal)

Website analytics are collected via Google Analytics 4, managed through Google Tag Manager. This data is aggregated and used solely to improve the website and product.

4. How Data Flows Through the Service

  1. Your request arrives via encrypted HTTPS/TLS
  2. We validate your API key and check rolling usage limits
  3. The request is forwarded to our AI model provider over HTTPS
  4. The response is streamed back to you in real time
  5. Operational metadata (token counts, status, latency) is recorded
  6. Content is discarded , it exists only in memory during transit and is never written to disk

5. API Key Data

API keys are stored in our database to authenticate requests. We store a display prefix (e.g. op-ul-e4st85dasf) and the full key in encrypted form. Associated configuration , rate limits, token budgets, expiry , is managed by your administrator.

6. Data Retention

  • Request / Response ContentZero , never stored
  • Usage MetadataLife of API key
  • API Key RecordsUntil deleted by administrator
  • Website Analytics14 months (GA4 default)

7. Third-Party Services

  • AI Model Provider , Your API requests are forwarded to our AI model provider. Content passes through and is not retained by us. We recommend reviewing the policies of the providers whose models you access through Opulon.
  • Google Analytics 4 , Website usage analytics. Data processed by Google LLC. See Google's Privacy Policy.
  • Meta Pixel , Marketing measurement on the website. Data processed by Meta Platforms Inc. See Meta's Privacy Policy.
  • Resend / SendGrid , Transactional email delivery (API key delivery, OTP codes). Your email address is shared only to deliver emails you have requested.

8. Security

All communication is encrypted using HTTPS/TLS. API keys are validated on every request. No content is ever written to persistent storage. Database access is strictly restricted and all sensitive credentials are encrypted at rest.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children.

10. Your Rights

Since we collect no personal information from API requests, your rights focus on your API key and account data:

  • View your usage data through your status page at /key-status
  • Request key deletion via your administrator
  • Opt out of website analytics via your browser settings or the cookie banner

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page. The “Last updated” date at the top will reflect the most recent revision.

12. Contact

Questions about this Privacy Policy? Contact us at info@opulonapi.com.